Skip to content
OpenAdvisories
Medium WID-SEC-2026-1106 4 CVEs

Adobe Experience Manager Screens: Mehrere Schwachstellen ermöglichen Cross-Site Scripting

Published Apr 14, 2026 · Updated Apr 19, 2026 · Revision 2 · de-DE

Vendor: Adobe Product: Experience Manager Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in Adobe Experience Manager Screens ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.

Product

Adobe Experience Manager (AEM) ist eine Content-Management-Lösung für die Erstellung von Websites, mobilen Anwendungen und Formularen.

Vulnerabilities 4

  • Medium 5.4
    CVE-2026-27288

    Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

    Adobe Experience Manager versions 6.5.24, FP11.7 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of t…

    Adobe Adobe Experience Manager
  • Medium 5.4
    CVE-2026-34623

    Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

    Adobe Experience Manager versions 6.5.24, FP11.7 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of t…

    Adobe Adobe Experience Manager
  • Medium 5.4
    CVE-2026-34624

    Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

    Adobe Experience Manager versions 6.5.24, FP11.7 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of t…

    Adobe Adobe Experience Manager
  • Medium 5.4
    CVE-2026-34625

    Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

    Adobe Experience Manager versions 6.5.24, FP11.7 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of t…

    Adobe Adobe Experience Manager

Revision history

  1. #2

    Referenz(en) aufgenommen: EUVD-2026-22681

  2. #1

    Initiale Fassung

References